HMRC loses data for 25 million people

Loss is "one of the world's biggest ID protection failures"

Written by Dinah Greek

HM Revenue and Customs (HMRC) has lost the personal details of 25 million people in receipt of child benefit.

The information contained on discs includes the names or parents and children, addresses, National Insurance numbers and, in some cases, the bank or building society details of those claiming child benefit.

In a Commons statement, Chancellor Alistair Darling said that two discs containing details of the 7.25 million families claiming child benefit, sent to the National Audit Office (NAO), failed to reach the addressee.

The blame was put on a junior official who did not follow procedure. The Chancellor said the "full copy of the data" was sent to the NAO by courier - not by recorded or registered mail. When it transpired the discs hadn't arrived, the same official sent the information again - this time by registered post.

Although the police are currently investigating and searching both the NAO and HMRC offices, the loss effectively means the personal details of every family in the country with a child under 16 have gone missing.

This is the second time in a month that HMRC has been involved in the loss of people's personal data. It lost the details of around 15,000 Standard Life customers after data on a CD sent from the Revenue's Newcastle office to the company's headquarters in Edinburgh failed to arrive.

HMRC and Standard Life have warned those at risk to be "vigilant" as the disc contained names, National insurance numbers, dates of birth and pension data.

Although Paul Gray, the chairman of HMRC has resigned, the Tories have stepped up the pressure on the Darling. In a briefing note the party pointed out that 41 laptops have been stolen from HMRC over the past 12 months.

Information Commissioner Richard Thomas has said the latest incident is an extremely serious and disturbing security breach and that the ICO was already investigating two other breaches by the HMRC.

The data loss, which has been called "one of the world's biggest ID protection failures", is unacceptable, according to privacy experts.

"It is staggering that an organisation responsible for the data of over 25 million child benefit claimants is still copying data onto CD's and not ensuring its full protection through encryption techniques," said Brian Spector, general manager for content protection group Workshare.

"It has never been acceptable for businesses or government departments to lose data but in today's information society, the flagrant disregard for the protection and security of this type of data is not acceptable."

Responses from payment industry organisation Apacs and the banking industry, however, are urging people not to panic. They said that there has been "no evidence that the data has not fallen into criminal hands nor that any fraud has been attempted as a result of this incident".

The HMRC has set up a Child Benefit Helpline on 0845 302 1444 for customers who want more details.

The banking industry also said it wanted to reassure people that "sort code and bank account, national insurance number, date of birth, name and address details are not enough in themselves for an ID fraudster to access your bank account - as additional security information and passwords are always required" .

See also:

reader comments

related articles

 

Security community slams HMRC

Security breach saw 15 million child benefit recipients' details 'lost in the post' 20 Nov 2007

HMRC data loss leaves 25 million exposed

Revenue chief Paul Gray resigns 21 Nov 2007

HMRC data loss leaves 25 million exposed

Revenue chief Paul Gray resigns 21 Nov 2007

latest news

Red Hat a good fit for Qumranet

Open source behemoth opens up Windows opportunities with acquisition of virtualisation specialist 05 Sep 2008

Infor praises partners

Software vendor outlines its channel vision at second annual EMEA partner summit in Marbella 05 Sep 2008

Version One and Accurate launch university push

Software vendors link arms to create integrated document and financial management offering for universities 05 Sep 2008

Most commented stories

poll

Stormy times ahead for PBX?

Stormy times ahead for PBX?

Will the credit crunch affect PBX takeup?

Previous poll results

In The Studio With CRN: Josh Claman, Dell

In an editorial coup for CRN, Josh Claman, vice president of EMEA channels at Dell, talks to CRN TV about the vendor's channel plans

CRN Fight Night bouts are LIVE!

ALL the bouts from CRN's first ever white collar boxing event at The Brewery in Chiswell Street, are now online in their full glory for CRN readers to watch.

events

CRN Golf Challenge 2008

CRN Channel Golf Challenge 2008

CRN's annual golfing day will this year be held on 16 September at a championship course in East Sussex

CRN Reseller Leadership Forum logo

CRN Reseller Leadership Forum

An exclusive channel conference from CRN, to be held over one action-packed day in September 2008

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Advertisement

White papers

Search white papers

Top categories